better role management; 'guest' user as options;