Add roles

Default Admin user gets role ‘admin’, and can see all data.