Add authorization and authentication support

[bentoi]

See #2820, #2830 and #1411.

We need to figure out how an application can easily implement a client/server that provides authentication and authorization for service operations.

The proposal to add cookies #1517 needs to be considered as well since cookies can also be used for the exchange of authentication information.