add user.clj; use lookup refs in r/assign2 and p/grant; add list-perms query
add db init fn in user.clj