Add authorization documents [closes #38]

Rough first pass for authorization scheme document.