added different permisions to roles
some more changes added
ready to push to heroku