Created ACL factory

- Open ACL by default
- Adds a guest role by default
- Denies assigned privileges on the given resource to the guest role
  (meaning any other role has access)
Created default authorization listener

- Uses injected ACLs and REST configuration; this will require a factory that
  creates the ACLs via the AclFactory and provided configuration, and which
  marshals a map of rest controllers => identifier_name parameters.
- Created one test asset, AuthenticationService, to mock what we need for the
  MvcAuthEvent.