security role authentication partly finished.

notAnon not redirects to profile page for landing page.
security role authentication mostly finished.

uses roles config object to define auth states and how to test em.