Add roles

- added roles and role_user pivot table
- created two admin accounts
- protect edit candidate routes for admin only

Fixes #10