reorganize security-package: create authorization and authentication sub
packages