Add model class 'Role' and associate it with 'User' by many-to-many
relationship.
Add Principal and Login mechanism
Continue to implement the permission functions