hashes for roles and apps
forgot the actual server to go with the get app callback.