Add simple access controll system #1

just three roles:
* owner
* moderator
* admin