auth: simple authorization framework