Add permissions and groups
Protect some controllers with permissions
Merge branch 'feature/users'