Base controller, model, resource and policy classes; authentication with JWT, per request tenant selection, exception reporting