Merge pull request #25 from ptmccarthy/mongoose

swapped user model over to using mongoose. such easy. many brevity. wow.
added basic permissions with admin, superuser, and player. the user model also now automatically makes a root user if one doesn't already exist. /users is now an admin-only route
added a user delete route that is available only to admins