updating fabfile to do better role separation