add butt-ugly reader/admin checkbox when creating new users

taking away the admin permissions is not yet possible
set of reader permissions is managed in RestPermissions.java in the server

issue #175