User view, permissions, etc.

Closes #30
Ref #26 (GET)