add basic user/permissions design