User roles

This is just a tiny model to link up PRBAC with Django auth. In a lot of cases, PRBAC might be used on its own, but this should at least make it easy.