wip avoid crashers due to AB access denied
asynchronous authorization; slimmed down person/group initialization
refac: multi-values should behave like arrays (empty if missing)
Merge branch 'auth'
Merge pull request #50 from jmay/master

try not to crash if AB authorization is denied