added in-app admin interface for managing users and permissions.  Eliminated separate users config file in favor of database entries.  Closes #12