Authorization

Token-based authentication and role-based authorization. Facility ownership not taken into account yet.