intermediate commit

implemented this up to now:

* grant all privileges to admin user in "--init-user-store" (broken!)
* PUT /user/location request
* role check for KomorebiSecurityContext
todo annotations
store/restore privileges