User Roles mapping, Authorizations widget, and a variety of other things

* more-splatted widgets* uniqueness on Person#email* fixes for ggrc_basic_permissionsNote: Brad, if you could review this, it would be awesome, but don'tactually accept it yet, because it has two migrations which, in theircurrent state, will collide with David's migration.