create default roles and their permissions, resolves #270

put will not work with partial updates, and we have several tests in test_user_permissions.py that are using put. maybe change the name?