A chapter on authentication and authorization

This is a first rough version. There is room for improvement and proof-reading.

This implements #47