User CRUD and ACL finished

See
https://cartalyst.com/manual/sentry#permissions
for how permissions works may need to write an explanation of them on
the admin menu...