Add STR_NOT_AUTHORIZED define for a common string

"You are not authorized to perform this operation." and variations of it
were littered all over the code. Having a #define for it will help
maintain consistency.