add team / role; midstream ui refactor
admin add user / team / role functional, with validation / existence check