New EnvUser

Add:
 - the EnvUser doc
 - support for setting the last login time for the EnvUser
 - factory methods for adding the envuser

Create the Admin EnvUser at bootstrap time.
I think there was an outstanding question about whether we should assert that the creatorName user exists. Maybe @fwereade or @howbazaar can answer that?