Implement ways to handle authorization

[jupiter007]

Once the user is authenticated, we need a way to control whether the user is allowed to visit certain routes, or perform certain operations, such as mutating data.

Try using middleware to check whether user is authenticated and centralizing access control. Use API Routes to control access to certain functionalities based on user's authentication and role.

[bofstein]

Have middleware in as placeholder but need to build out authz as we add roles, permissions, etc.

[bofstein]

May need to be its own Epic:

• Decide on possible user roles
• Design how they get granted roles
• Implement role-based access on website
• Figure out how to remove roles