added roles to default controller; altered view method to enforce lowercase api points