Add folder creation endpoint.

- Add model layer validation exception type
- User model is now access controlled
- Added size field to user model also
- Remove child lists from document; use parent refs only