Tornado access lib for user role