User management works, with authentication and roles