access: customized access configuration

* Adds new inspire module overlay for Invenio access module.

* Sets up some default DEMO cataloger roles.

Signed-off-by: Jan Aage Lavik <jan.age.lavik@cern.ch>
I don't remember what was the meaning. Why do they have ```deny all``` ?