Add WebAC as a Request/Controller middleware

[DiegoPino]

That. Need a lightweight way of getting inheritance. L-tree? Nah, maybe simpler, maybe persisting the computed authorization each time a resource is created/update instead of on the fly calculating