can now verify authorization scope via OAuthProvider.getSession().isGrantedPermission("permission_id")
first draft of a quick start guide
suppressing debug output for now
Merge branch 'feature/permissions_api' into develop