Roles

#### Implementation

I've tried to make something simple... A `role` is embedded in a user, it can be global ('admin') or scoped to a ressource ('editor' of a bucket).

I'm not sure of embedding role documents inside user documents.

#### API

- `GET buckets/:bucket_id/members`: It returns a list of users that have a role in a given bucket.
- `PUT buckets/:bucket_id/members/:user_id`: Allow to add or update the `role` of a user in a given bucket.
- `DELETE buckets/:bucket_id/members/:user_id`: Remove a user from a bucket.

#### TODO

- [x] Define role and permissions.
- [x] Validate role when using `#upsertRole`.

What do you guys think?
No worries, I just submitted some of these changes to @oliger — Would def. still want your input afterward (see the Assembly discussion for info)