Start to support smart roles such as owner
Add checkAccess for subject and token
Add unauthenticated role