Add code documentation and authorization support

Authorization works as follows:
- If the user role is 'admin' he has the rights to do anything
- If the user role is 'user' then it can only do requests on its base, and do POST request on the kTBS root