adding roles and ability in login