A chapter on authentication and authorization

This is a first rough version. There is room for improvement and proof-reading.

This implements #47
fixed in my local next version :-)