Add permissions model, audit log

This adds a basic permissions model and audit log to the FE. The
permissions model is not yet exposed in the API.

Also, we don't have fine-grained control over granting/creating
permissions, at the moment manipulation requires the permission_admin
capability on your user account.