preliminary tests with authorization object
preliminary specs
added authorization method to policies
replaced 401 with 403
splitting authorization and authentication
Merge pull request #1 from coderly/code-start-authorization-with-policies

preliminary tests with authorization object