Added support for authorization, and a basic authorizationpolicy for recipes. Also added roles, where a user can have a single role => deciding the authorization