User role validation

This adds user role validation:  stores user info in session, updates local model when someone changes their name in KotisAuth, allows/denies access to uploads, and adds tests for all changes and new features.

I'll merge this in Monday, pending comments and changes.