Add Role Based Access instructions

Create user attendance relationship and UI CRUD
Add `PreAuthorize` annotation to controllers to restrict access
based on role
Update navigation to reflect the current user's role