Clean up CWMS user roles

[adamkorynta]

Brought up in the last database meeting: security roles seem to be inconsistent and at the very least require redundant roles for full functionality. In particular the CDA user is required to have both CWMS admin and PD user roles.