Issue #1014: Add support for plugging in different authorization services
Redesigned the code to make it more generic, and to expose the full authorization service as a proper component, not just as an old RightsServiceImpl