http://drupal.org/node/19828
user id=0 (guest), id=1 (admin)
assigned permissions via roles
1. create role
2. set permissions to role
3. set user to role
built in roles:
1. anonymous user: a user who is not logged in
2. authenticated user: a user who is logged in
