Role-based access, password changes should be documented

With the #97 (closed) merging soon, we need to document the user visible changes introduced:

1. describe the idea behind role-based access
2. explain what roles are currently available (this list is expected to grow significantly over time)
3. update the section about creating new users (only super-admins, explain group selection)
4. describe how a user can change his own password