Simple, permission-backend agnostic, activity/role based authorization for Express based applications.