Working on guest access

Need to re-visit passport and passport-local-mongoose.
Added warning log to priviledge updates in User.ext.js for when roles's
record space are above the user's record space. (currently we do not
allow this to happen)