From the table of contents of Clojure Programming I noticed there is a section on "the Web". However, I was not able to discern if security -- authentication/authorization -- is covered. Are these topics covered in the book? If not, could you kindly suggestion some other resources? Thanks.
No, the web programming chapter in the book does not cover authentication and authorization.
For some years, I've used spring-security to cover this aspect of things in my Clojure web apps; if you already know it, that's a good place to start.
I've personally been frustrated with spring-security in a variety of areas though, which is why I've started a Clojure-specific authentication/authorization library called Friend. Clojure offers a number of facilities that have already made me far more productive with it than with spring-security, and I suspect it will only get better as time goes on.