work in progress permissions rework
bug fixes and client understands to 'user' message
button to generate admin account when it does not exist
users can login, logout, edit username/password
show admins list of users in settings
admins can update permissions for users
roadmap update and other README cleanups
admins can delete users
admins can approve validation requests
restore mpd support for password command using username/password

fix changing the permissions for the guest user, it affects all
non-approved users now.
subscription auth handled correctly

event subscription fails without the correct permissions, and when
a user is logged out, they are unsubscribed from things they don't
have permissions for. client automatically resubscribes when
permissions change.
Merge pull request #320 from andrewrk/permissions-rework

permissions rework