Added the concept of authentication, users and roles.
Enforced permissions via authentication scopes.