basic policy to authenticate requests
isAdmi policie
remove passport for auth
refactor
user.toSession
Merge branch 'remove-passport' into roles
minor policy fix and role check
500.js returns JSON
user check correct role before create
Merge branch 'roles'