added roles in the rest endpoints