Introduced an authrorisation service and wired it up to some of the query actions.