Add an identity class. Feels...right...
Add an example of an authorization policy