setting role
allowing only logged in users