Update loopback to 1.6
Enable access control.

Add User model + other models required by ACLs.