closes #7 added RBAC and all jsp are set to display appropriate view based on role