User permissions

The ESA-crew waved some concern for all users to be able to add and remove users as they please.
Add some form of user permission before letting a user perform a change.
Example:
```
type Permissions struct {
UserManagement bool
CreateNews bool
DeleteNews bool
}
```