Feature/further authz

This protects entities and is an example of how we'd have to secure other resources. Uses core.match to deal with all the various permutations. Rules here really apply to everything and might be refactored back into security.clj.