fixed authorization, added assignments for user-role many to many relationship, more shit