secured with 3 roles now, app access restricted to logged-in user!