Basic ACL

**Changes**
+ Add acl.js file to app.js
+ Add properties “permissions”, “homepage”, “support”, “companyName”,
and “companySlug” to user
+ change login to return permissions
+ Add ability to set developer and reviewer permissions. Right now, can save "developer" and "reviewer" and "admin" permissions.

**Tested via**: CURL calls

**Things to consider**:
+ When testing via curl, "dev" and "rev" and "admin" variables were strings, so I converted them to booleans.

**Things todo**:
+ [x] Only allow "admins" to change permissions (making a new issue)