Add @RolesAllowed to allow/restrict user access