Role improvements

on system initialization give the first user the role for system administrator

when creating a new account give the user the role client administrator

switch to storing id and not name in the user.roles field