Suck permissions and roles from OHC authentication.
(e.g. the people who are admins at auth.openhealthcare.org.uk should be admins here also(
closes #29