authorization added; admin role added