setup roles through application helpers