Add Roles security to controllers.