implemented authentication and custom role provider