added access token
added different views depending on user role
Fixed routes with access token.

- implement initial change password.