auth cleanup, role assignments and views