[serialization] Return 406 when deserialising plain text
[security] Add abstract authorization filter
[security] Allow to get user from HTTP context publicly
[example] Add method authorization