[#80256282] Adds admin privileges and staff route
 - session controller queries for user and adds isAdmin property
 - adds hasRole static model method to check user roles
 - adds staff route
 - adds bethelStaff policy
 - blocks access to /user list route
 - removes white space throughout

Signed-off-by: Josh Gillespie <josh@astonishdesign.com>