Added access control for web endpoints.
Added: Admin and root roles in admin UI are now invisible if not logged as root.