574 pyramid authz

This is meant to be merged after the #497 pull request.

It takes control of the annotator-store authorization using Pyramid ACLs.