[business] users have roles
[rest] http basic authentication; glassfish cdi problem fixed