added manager and role fields in the user add page. server side authentication check. file type restriction during file upload