* default role validation added on construct of controller