Update isAuthorized() to use User::hasRole()