implement authorization for equipment & rooms, closes #10 , closes #17