Added an enum to represent the possible roles. Maybe move to data later, but right now this is fine. Updated the account class to base the default on the Enum. Updated the security context to protect the admin interface by requiring the admin role.