A service that determines if a request is authorised