move check_if_signed_in to application controller
move roles to own controller/ some spec cleanup