added authorization and roles