Roles

Roles can be set to users. TODO: Delete role; Only admin should be
authorized to manipulate user roles.