Backfill user consent

Two backfills:

1) Stormpath -> DynamoDB
2) DynamoDB old schema -> new schema
session.getUser().isInRole("backfill")
getUser().getRoles().contains("backfill")