users, roles and permissions -> security improvements