base users and roles

this is a minimal implementation of users / roles.

should I add anything else?