Add example of association authorisation

[pmackay]

The configuration of assocation policies are somewhat tricky, it would be super helpful if this demo included methods in the policy classes to define association permissions.