add basic authentication system using user roles