starting to make identity/principal type configurable, beginning with default user type
first passing specs for authorizing custom identity