test(auth): clean up and complete unit tests
feat(auth): added role-based authorization system