added enrollments controller. added EnrollmentVerifier to validate CV.
set :protect_from_csrf, false as we are exposing a REST API.
added lib/* to load path