Create a role system for API use

[Bouncey]

As we plan to expand our API and application surface area, we need to implement the use of role-based API protection.

• [ ] Roles should include guest, user, organiser, editor, admin
• [ ] We should be able to add new roles at a later date
• [ ] We should be able to protect role specific routes via middleware

[raisedadead]

Yup. TBD post move to LB4.

[thecodingaviator]

Why not open this as a project?