[#162530597] protect admin routes, deploy to heroku

[ipaullly]

What does this PR do?

Add protection to routes only meant for admin accounts and make code refactors to allow Heroku deployment.

Description of Task to be completed?

• Modify views for admin endpoints to throw a 401 if the account is not assigned a 'role' of admin.
• Add logic to assign roles whenever an account is created. the first account will always have the 'role' of 'admin' and the rest that follow will be assigned 'user' by default.
• Add config variables on Heroku i.e. to set up a PostgreSQL database add-on, SECRET KEY