step towards declarative auhtorization
add declarative rules
validate that only expected properties are used
simplify validation of can
simplify validation of can
get current user from server
a version of the can rules
simple rule invocation in authorized route
simple rule invocation in authorized route
improved error handling
error handling