admin: Allow searching and filtering in role admin
admin: Drop RbacUserAssignmentForm and use user.id instead

This aovoids large drop-down lists and increases performance in setups
with a large number of users.
models.RbacSession: Set expire_date correctly