Extend backend guide with best practice for role-based authentication

[ludwigmuench]

The backend guide should contain our best practice of achieving different capabilities with a single user model based on roles (using Rolify).