#67 add user authorities based activation strategy

- make SpringSecurityUserProvider to populate "authorities" user attribute with a set of granted authorities;
- add UserAuthorityActivationStrategy activation strategy that is configurable with a comma separated
  list of authorities and activates feature if user has at least one of those authorities;