Merchant users

Portal logins for operator staff. Each user is bound to one operator and only ever sees that operator's data.