* refactored Role and Permission model (relationship)
* refactored admin section for Role/Permission creation
* as discussed, we're interested in what permissions a Role has, not to which roles a permission belongs to