User object

Closes #45

This is the User object for create, edit, login, and retrieval of private or shared studies and analyses.
Ask for the string, so the user doesn't need to know the conventions. Also, it looks like is really easy to a user become an `admin` by mistake. I would suggest removing the setter for now until we put in place more security...