more user stuff, cleaned up application assets, used roles