EDFIAL-352-EDFIAL-353-Auth setup

[rtavernaea]

https://edanalytics.atlassian.net/browse/EDFIAL-352 and https://edanalytics.atlassian.net/browse/EDFIAL-353

• This PR doesn't actually add roles yet, since we will need to separate out login strategies in order to handle this
• Adds privileges getter to dto that will assign privileges given a role
• AuthorizedGuard will error if user doesn't have permission for a given route defined in the decorator
  • I copied over all the logging behavior as is from UM. But I know we talked about it being a lot of logging every time no privilege is defined for a route (since most will not have any at first). Thoughts on removing for now and adding it back in once more routes have a privilege defined in auth decorator?

original PR with comments https://github.com/edanalytics/runway_old/pull/107/files

[edandylytics]

Tests look good! There's a couple small issues and some cleanup.

[edandylytics]

Overall, looks good. One small change to test cleanup and we should be good. Nice job slimming down the auth logic -- much more straightforward now.

[edandylytics]

Updates look good!