Clean up JS; refine access control pathes into users and roles which are mutually exclusive