Add authentication and authorization

Add (conditional) authentication and authorization with RBAC (Role Based Access Control).
By default, authentication and authorization is disabled. If enabled, corresponding RBAC
environment variables must also be configured.

Note that commit is first step in introducing authentication and authorization.