Add ControllerConcern which defines some methods on all Controllers to enable authorization checks
Boyscout: use consistent style for creating new Exception classes
WIP: Notes for building a evaluation context for ContextRoles.