add support for RoleHierarchie
Tweak some security configuration