Audit logs

A lot of things can happen in the product without it being visible who did what. E.g. deleting users, deleting roles, deleting comments etc.

We should keep track of and expose a global audit log, with filtering, that shows all actions taken