Add role-based authorization

Closes #3.
Any chance this file can go away? Seems to have been a mistake.