Add checks for admin roles per ecu-13...

As discussed in ecu-13, this pull request adds optional support for config.adminRoles, which can be used to control who can add, edit and delete arbitrary users.