Change role based system

[joshcai]

Current solution doesn't work that well - each user can only have one role, the roles get defined at startup, which causes issues, and I believe adding permissions doesn't affect people who were already assigned roles.

Probably will add an array field to model that gets appended with role entries.