first implementation of user roles
bugfixes