rework security system to a role based permission system
rework permission handling so that step and transition can exactly have one assigned permission
provide a default event based factory for main objects
fix code style for factory implementation
complete security specs
describe factory events and fix the namespace