CARE #3: Add user authentication, management, roles