Adds borrow and return actions

The pr adds the borrow and return book actions. I also added check_authorization to make sure every controller authorises the call.
Some parts of the code I use, like the BookKeeper need refactor, but that is not on the scope of this PR.
Perhaps change this to delete method. Leave the **update** to methods like extend (which you don't have in your code base yet)