Introduce UserAuthorization as a dynamic REST service provider.

Implement AuthorizationRole as an user authorization filter for
incoming requests -- making authorization configuration dynamic
rather than staticly compiled to code

Introduce Role enum to map web deployment descriptor role names
to type safe constants