Authorization is now database driven, no roles are needed as of yet