access authorities through the user entity
a few color changes