Closes #46 Implemented declarative authorization