Add basic authorization models and them specs