add roles that we can assign to users

Might as well add a second role such as 'reporter', so future logic can be tested with different roles.