Add auditor role

Auditors should be able to see the usage and update logs of data sources and applications.

Auditors will be responsible for a set of data source and applications - e.g. those created by people at their institution