Add (conditional) authentication and authorization with RBAC (Role Based Access Control).
By default, authentication and authorization is disabled. If enabled, corresponding RBAC
environment variables must also be configured.

Note that commit is first step in introducing authentication and authorization.

Handle exceptions in service and controller layers.
Translate exceptions to http status codes in global exception handler.