Authentication by local source working.
Simplest auth use case done.
Validate tokens.
Get groups api.
Recursive authorization of local groups and users done.