Added role based middleware authorisation