cri_auth: add ability to impersonate users

we need a way to impersonate users, we may use a specially designed middleware setting request.user to the impersonated user and request.real_user to the impersonating user.

An impersonate permission should also be added.