added roles to base controller