added authorization runner responsible for wrapping actions in authorization check
no default EventLogFactory - can be added only when event logging is enabled