added basic permissions with admin, superuser, and player. the user model also now automatically makes a root user if one doesn't already exist. /users is now an admin-only route
added a user delete route that is available only to admins
Merge pull request #26 from ptmccarthy/permissions

Permissions