Added basic "role management" so that each user has a specific set of permissions; will incorporate into user registration later