Basic ACL support

I thought it might be useful to provide ability to specify roles for each endpoint. Not sure if it belongs here, but it means that when performing any database lookups for user validation, the query can include the roles.