User permission system

Implements the user permission system discussed in https://github.com/my-koop/service.website/issues/224. Does not implement the advanced permission mask system discussed towards the end, that will be done as a part of https://github.com/my-koop/service.website/issues/277.

Permissions for the front-end routes (https://github.com/my-koop/service.website/issues/157) will also be done separately.


I don't know, I intuitively try to avoid sending anything capitalized over the wire, for fear of corruption I imagine... it's not exactly justified. I can change it to `loggedIn` if you prefer.