moved Authentication/Authorization* to auth directory
passing context to AuthorizationProvider
removed identityservice from TokenAuthenticationFilter
added authorization in flow of StaticFileHandler
created AuthorizationError
completed Authorization
added tests for Authorization