grant a user
PUT /security/authentication/user/{username}/grant
deny a user
DELETE /security/authentication/user/{username}/grant