Added roles, adding routes to User to replace dev defaults