create user authority system

This will remove the need for a root user, instead giving three groups
of users initially (possibly later given by a separate table in the
database).