User role validation

This adds user role validation:  stores user info in session, updates local model when someone changes their name in KotisAuth, allows/denies access to uploads, and adds tests for all changes and new features.