user role management added to backend