Split user permissions routines into AppHandlers.Users module
Use more appropriate names for auth combinators
Add AppHandlers.Users to .cabal
Use Postgres roles in permission checking handler combinators (#622)