Authentication and authorization service for multiple applications