authentication / authorization service in scala