changes to session_start() and user management role defined

session_start() is now located in the heade include
red admins now only see users that are within the red group and can only
assign red groups
blue admins vice verse
administrators still see everything