create "api_users" support app permission

This permission will be used to grant the `feedback` app the ability to post to the `support` app