Authorization

* Adds different roles
* Restricts user management access to non-admins