Merge pull request #4 from myrle-krantz/develop

modeled and implemented application security and permission endpoints.