[#818] User roles and permissions

* Add management of user roles and permissions
* Hide survey definitions and survey response data depending on user authorization
We need to enable the access decision manager in the API endpoints too