wip(auth): check authorization
wip(auth): check authorization

- if denied returns false
- if allowed continues until en or false
- if no matches returns default

issue #916

UPC/ravada,UPC/ravada,UPC/ravada,UPC/ravada