[permissioning/auth] Research Authz options

[jmoggr]

A more robust Authentication (AuthZ) system is required once we start differentiating between NG admins and round admins. There is significant overlap here with work that will be required for SFF.

A simple role based authentication model will suffice.

I should spend ~1h getting back up to speed with tools and techniques in this space. I am only ~9mo out of date.