Add basic user setup/authentication #2

A basic user creation/deletion/authentication flow is required to register accounts/user identities. The user's identity MUST be used to scope responses from endpoints.

The following behaviors need to be implemented:

• User creation via API/web interface
• User basic auth via web interface
• User Oauth2 authentication flow and scope assignment
• Principal filtering of endpoint content