Setup user authorizations for journals, notes, and collections

[mononoken]

User should only be able to view notes if:

• User is the owner of the note
• User was given authorization access by the owner (This would need to be implemented!)
• User is viewing the note through a Collection that the owner has joined with that note's journal

[mononoken]

74133547a4eaff7e6fa9da1e8d231d06848b71be adds CollectionPolicy and policy files for journals and notes have been added at this point as well. This issue is now too open ended to be of use until more specific authorization functionality is required.

Do note that the last two points have not been implemented yet but that functionality is down the road.