Use PDO for user (and user permission) management