PBAC: Allow arrays of permissions to be checked (interpreted as an OR)
RBAC.user: Get roles from REST entity
User: Small touches on login/logout code
UI.Paginator: Initial commit