access: new has_(super)_admin_role methods

* PEP8/257 improvements.
* Adds simple Flask-Admin interface for access models.
* Cleans legacy `webuser` usage.
> I see that this was the original implementation. Still we can fix it.

We should remove it ASAP! It's full scan on user table which is way worse than the `except: pass` :sob: