Support tomcat users

@bmuschko As we discussed in #107, supporting configure basic authentication user

closes #107
A user can multiple roles.