added permissions: for editing only oneself's posts, admin can edit and remove everything; added roles to users (can only be assigned manually)