Add plugin manager for assertions, test and refactor the authorization service