Added authorization filter

Auth middleware switch in app.config can also affect the authorization
filter.
Authorization follows the route group tags registered in
util/namedroutes.js which exposed by meta_objects/Resources.js,
assignment occurs in User.ext.js (role based calculation).