Add ROLES, user controller and authorization

* views to create new users
* authorization by role