Authorization api sample to mimic XACML specification. This will eventually be expanded into a full specification