Separate patient from user

[pierd]

Until now we were assuming that user == patient. We should let different users have different access levels to patients (for example: no access, read-only, comment, admin).