Update todomvc example to work with ACL Policy instead of drools. Update auth and todomvc to use authz from application.json