Wire up POST /db/:db/users
Wire up GET /db/:db/users/:user and use Matcher

In addition to wiring up the endpoint, this commit also changes the
user endpoints to use two []*Matcher for readFrom and writeTo instead
of a single []string for permissions.