implemented role-based authorization in JS code. updated README