Changed the req.application variables, now they are just workspace, user, access. Everything else is there. Added a perms module to check permissions, changed what the ForbiddenError was, and added Authorizate error for when resources are just not available.