Implement token authentication for submissions

Modify roles and admin access as well.

* Add submitter role
* Reserve access to /admin for Redactors+ only
Automatically set certain entities for known users