User / Role model changes

* Users can only have one role
* Add extra failed_attempts and last_attempt fields to user
* Make email field allow NULL