Feature: Authorization

[oscar60310]

Description

I've implemented the logic of #72 , we only need to inject evaluator and provide the user information:

   const profile = this.evaluator.evaluateProfile(user, profiles);
    if (!profile)
      // Should be 403
      throw new Error(`Forbidden`);

I also pass the profile name to template context, we can use {{ context.profileName }} to get it.

Issue ticket number

closes #72

Additional Context

[kokokuo]

LGTM 👍 👍 👍