introduced bidirectional jpa mapping between application users and application roles