updates database design doc to include cohort_user table, which essentially captures permissions

Change-Id: Ibb17b0e269d44dda07e8261bd02d7e2e206c8501