start introducing editor roles - must change all /admin routes
added security access rules and security entry points