Update authorization and staff model

> Coming to ORM model