User authorization and liquibase

Should be able to run liquibase to sync local with dev, qa, and prod.  We should decide whether we want to use the liquibase servlet context listener.