enabled user management and fixed authorisation checks to be more efficient and allow for 3 levels of user