add some developer tools
permission policy configuration with default setting

most apps use the current_user method so we should set this as an 
overwritable default for the policy initialization
add policy::authorization as the base class

* will handle the configurable initialization
* should later delegate all of the auth logic to corresponding classes
* raises missing precondition error when not proper initialized
setup basic railtie with controller additions
add base strategy to define the permission check api