Authentication and authorization design manual

- Updated index to separate system design documentation.
- Documented classes and behaviors for authentication and authorization.
- Explained migration from Active Directory to Google Auth + email / database.