Authentication with nanoids and roles included

[Phasmatrix]

• Basic validation where nanoid is used instead of the mongo id
• Add permissions to a user
• Sanitize and validate authentication service and token request
• Allow user permissions to be returned to client
• Only allow admins to create entities
• Return permissions of user object when returning jwt token
• Remove app create disallow as all routes are protected now
• Only allow admin to access users and user to access own details
• Start of code cleanup
• Cleanup user protect code to separate functions
• Protect users find route
• Allow admin to remove users
• Allow user patching
• Remove backtick

[Phasmatrix]

Everything checks out. Works locally.