Load model authorization

[sudoremo]

It is possible that we can eliminate the load model authorization functionality entirely. Operations using the Load base class can authorize using :read, while more specific operations can use :update or whatever. If we really need to check for :read when updating an object, it can be implemented in the ability class.

This would greatly simplify model authorization.