add code to demonstrate group and role authorization