FR: Access control

[mrworf]

Since we need to share this with gardeners, it should be possible to create accounts which will allow any/all of the following:

Control of:

• schedule of one or many sprinklers
• boost
• suspend
• when it should run (and what scheduler)
• Enable/disable one or more sprinklers

There will not be access to the admin parts, meaning

• Adding/removing sprinklers
• Changing GPIOs

All changes done by any user should be logged by the audit trail, including logins

[mrworf]

This will require the use of tornado seeing as flask isn't meant for production and this behavior above does mean exposing access to external users.

[mrworf]

Should also make sure SSL is possible

[mrworf]

Needless to say this is a BIG ask