WIP: change db roles based on HTTP basic auth headers