added roles
very basic roles access with hasRole and auth.isAdmin function