Add authorization for openDuT EDGAR/CLEO

[mbfm]

Following #290, we want to additionally handle authorization for EDGAR and CLEO.

The API should reject unauthorized requests from EDGAR and CLEO, after #290 is implemented.

Tasks:

• CLEO should show appropriate error messages when the user's permissions are not sufficient.
• EDGAR should not be allowed to administrate CARL (despite using the same API as CLEO/LEA).
• tbd.

Still needs to be refined:

• Does CARL need to handle uninteractive authorization differently?
• Do we need to provide different information via the Setup-Strings?
• Do EDGAR/CARL need to send different information compared to authorization?