[#818] User roles and permissions

* Add management of user roles and permissions
* Hide survey definitions and survey response data depending on user authorization
Also the API interceptor already takes care of read only status for API users.