added email based user model.  added permissions skeleton.