Adds Authorization helper.

This will give you the logged in (active) Person.
Moves controllers to subdir. Adds API module to root.

Cleanup, basically.