roles, mem session store