Authorisation with annotations working, with exceptions captured and
notified to the user.  Closes #57.  See #37