hook up authentication policy callback to use global roles
introduce "owner" role
Merge pull request #5 from pyfidelity/global-user-roles

hook up global user roles & introduce "owner" role