Get role or set the public role

Fixes #26 

 - [x] Set the public role
 - [x] Allow public role

`ObjectId("000000000000000000000001")` is the ghost CRUD role that will have the access configured in templates.