feat(webapp): app authorizations

- cockpit & tasklist: deny access to users who are not authorized to
  access these applications

related to #CAM-1043