Set up user authentication and simple role-based permissions