Support tomcat users

@bmuschko As we discussed in #107, supporting configure basic authentication user

closes #107
Role and user creation needs to be decoupled.