getSession method temporary stubbed to perform testing
mapping added for Role, getRoles() implemented
mapping added for User, authorize() implemented