User management

fundamental user management.

Admin can edit all aspects of a user.
Librarians can edit all info, but cannot promote or delete users.
Patrons have no role and can't do anything except change their basic info. 
I like explicit returns but if we're going to use them with the trues, we should use them with the falses, too.