fixed account authorization method, to check for undefined roles