first revision

removed relations
added rights and 2step authentication