Lockdown user model permissions

It works, but I think it's a bit messy and yuck. I do think `sys::authenticate` is the best solution, but it isn't nice making temporary users.