code: private Http.RequestHeader markAsAuthorised(final Http.RequestHeader request)
      {
          this.authorised = true;
          return request.addAttr(ACTION_AUTHORISED,
                       true);
      }
docs: Marks the current action as authorised.  This allows method-level annotations to override controller-level annotations.
  
  @param request the request