Enhance authentication for timers

[JohnLockwood]

Once we have role based authentication in place, we should add additional role based rules for Timers. Proposed:

Root - Can do anything for any account
Account Admin - Can do anything for that account
User - Can do anything to his own timers only.