add user roles, authorization, and role management