added UserRole and Profile entities and refactored HttpSessionUser