Authentication service

[graft]

As User models, groups and roles get more complicated, there needs to be a gatekeeper that keeps track of users and permissions on Magma models.

Data requests to Magma should therefore pass through this authentication layer first, which decides whether you have the authority to receive the data requested.