Adds a UserResource.

Adds isAdmin() method to assert if the user is an admin.
Adds server-side authorization.

Adds method for User logged in.
Adds method for Admin-only routes.