Working on user role & auth endpoints