Usercreationrefactor

i had to turn off the /updateroles API for now, @senhorzinho i think this affects the spreadsheet launch are you sure you want to deploy with out it? while i was trying to understand the dbConnection vs req i found something i didn't see before (that you were using values in the req to add and remove users from corpora, without making sure they had the permission to do that.)