Added object authorization checks on current user requests
Merge branch 'dev' into security
Merge branch 'dev' into security
added authorization security testing