Add basic roles for users

- Embed role in users. Not sure if this is a good idea...
- Add simple routes to manage bucket's members
- Add permissions checks

I still have problem with password...