Refactor the Auth code into Authentication Providers and Authorization Middleware

[kevinastone]

Split the auth code into providers that resolve the User based on the given credentials (bearer token, sessions and test user workaround) and separately, perform authorization checks on designated routes or nested routes (user required).