Added moderator+admin roles, set up basic permissions