associating user with gym
added floor plan for demo gym
logging gym when modifying route
only users associated with a gym may modify routes of this gym
session token validation

using Spring Security REST and userapp Java lib
removed User, Role, and UserRole classes

also checking for admin role when adding routes
Adding Java 7 support for Heroku
got rid of Spring-Security ACL plugin
removed custom PermissionEvaluator
updated to restful-api plugin 0.9.0

registering exception handler for access denied exception