mostly closes #5, need to fix roles