tests working, but need to particularly test users with multiple roles and anonymous users