Extract User authentication and authorization service from api service

[asankov]

The AuthN/Z service should be a separate one. Ideally, it should be an OAuth provider, or should be able to integrate with many such providers (Github, Google, Facebook, etc.)

I am thinking that this service could be written in Java(with Spring Boot).