Added privilege map into serialized user session.

Ready to work with authorization layer.