add derivedFrom for workspace
Merge pull request #33 from Connexions/reduced-workspace

add derivedFrom for workspace
Return 401 Unauthorized instead of 403 Forbidden if user is not logged in