Improve the authorization mechanism

Right now, the authorization system is very simple and effective. However, it has a performance issue: double access to databases (in the security check and in the business method).

A way to improve this is by using ACLs. Spring Security provides tools for this.

Check https://docs.spring.io/spring-security/site/docs/current/reference/html5/#domain-acls for more info. 