add custom auth for users and levels
Merge branch 'authorization' into development