#1214 User authorization

* Added user roles
* Added user permissions
* Modified API endpoints to authorize users