User auth

- Includes Sarge for role based auth on routes via `plugins.sarge.roles = ['admin']`
- Updated `User` to utilize a `.role` key instead of a boolean admin route, allows for routes to support an array for roles instead of a simple toggle for one or the other
- Removed tabs accidentally merged in with TJ's pr