bake in a roles controller and model