Roles and permissions

Uses `/api/v1/roles/` and `/api/v1/permissions/`. Role names do not grant power by themselves.