Moved role checking to a server and client side lib. Wrote more code than I should have to in order to get users' email addresses, so we can check if they are admin or not. Refactored role checking a bit. Added some more test data to bootstrap to test admin/ownership checking.