removed lint warnings
Added auth middleware to REST api
Added roles for auth