Add role-based authorization

Closes #3.
Can this be reduced to: `var users = context.UserProfiles;`?

See: http://stackoverflow.com/a/13658887