fixed user/role association and starting work on subscriptions