Move authorization logic to new layer.

[mario-nt]

Parent issue: #616

Handlers that require an optional user ID, check if the user found in the bearer token exists in the database in the handler, however, for handlers that require an user id, that check is not done in the handler but for example in the torrent service.

It would be ideal to have the same app behavior regardless of the type of handler (required or optional user ID):

• When we receive a token we should always check in the handler if the user exists.
• If the user does not exist we should return an unauthorized response. Even if the user is optional for that endpoint.
• The frontend should invalidate the token if it receives an unauthorized response and remove it from the local storage, and do not send it anymore to the server.

[mario-nt]

Subtasks:

• Database layer

• Service layer

  • First draft
  • First review and refactor
  • Other services authorization implementation
    • Category
    • Settings
    • Tags
  • Tests
    • Category
    • Settings
    • Tags

• Cleanup