Support tomcat users

@bmuschko As we discussed in #107, supporting configure basic authentication user

closes #107
Why do you think it should be decoupled? We cannot add a role by itself, only with a specific user.