Add roles

@feanil I'm hopeful this will fix the Mongo issues that @wedaly was seeing, see hipchat.  Will try to test from here and see how it goes.
Can you move this into a js template so that we don't have super user passwords in history?