refactoring: user roles in app