db: schema for user roles and permissions
web: create user, roles, etc