A chapter on authentication and authorization

This is a first rough version. There is room for improvement and proof-reading.

This implements #47
should might, should see or might see? not sure.