Basic ACL

**Changes**
+ Add acl.js file to app.js
+ Add properties “permissions”, “homepage”, “support”, “companyName”,
and “companySlug” to user
+ change login to return permissions
+ Add ability to set developer and reviewer permissions. Right now, can save "developer" and "reviewer" permissions.

**Tested via**: CURL calls

**Things to consider**:
+ Originally, I required the client to specify a company name for the user if it was setting developer permission to true (because a developer should have a company).  I decided to not commit that yet, as we maybe want to leave that to another call (to update user settings, after acl update). If you think we should do this, I'll commit that as well.
+ When testing via curl, "dev" and "rev" variables were strings, so I converted them to booleans.

**Things todo**:
+ [ ] Only allow "admins" to change permissions
+ [ ] Maybe prefill "homepage", "support" based on company name (if we decide to set that here, and if there are already other developers under that company name)