Support for protected resources

Need a way to make resources only available to autnenticated & authorized users