Yii 2 user auth web application with RBAC NIST Level 2

We have already developed a PHP/JS web application that features interactive mapping with many map layers. The layers are AJAX-driven and require authorization. We would like to leverage a separate Yii 2-based application that presents an API for RBAC NIST Level 2 authorization checks, as well as provide the GUIs for user/role/permission administration, and GUIs for logins and forgotten password functionality. We wish to hire a consultant who would develop a standalone Yii 2 application using PHP 5.5, PostgreSQL 9.3, and Apache 2.2. We would handle the integration with our existing mapping application. For security reasons, candidates MUST be United States citizens. Requirements for GUI: ---------------------------------------------------------------------------- New user signup ...About 20 user fields ...reCAPTCHA ...Email notice sent to admin for moderation User login based on email and password Forgotten password reset via email Administration: ...New user registration requests approve/reject, assign to role(s) ...User account editing (~20 user fields), with role editing ...Nested groups (RBAC Level 2 "roles") ...Role-to-permission mapping ...Add/edit permissions Requirements for API used by Front-End Application: ---------------------------------------------------------------------------- Check login status and authorization of a given permission ...The API should be a light PHP script, callable with a PHP ...include(), using scope variables for parameter and return Notes: ---------------------------------------------------------------------------- 1. All GUIs can be very basic, with emphasis on function over form. They will be inserted into existing site using <frame> or <iframe>. 2. Authentication should use session cookies.