notes
added a couple of ways (CastleWindsor via DefaultPersonFactory and PostSharp) to add an authorization implementation to domain model method calls. still messing with it, but they both can work right now.