Start implementing authorisation rules on server
Ensure that each tasks are scoped to current user on server-side
Add a new GET session api to get session status
Remove RSpec deprecations
Merge pull request #3 from stevehook/auth

Server-side authorisation rules