create default roles and their permissions, resolves #270

let's but this class in it's own file for organization