[Sprint: 40] XD-2122: Use roles for security access

Chose to leave ROLE_ADMIN for pure management access. CRUD access is ROLE_CREATE and simple R access is named ROLE_VIEW
Since this is commented out, initial access to the Admin UI results in anonymous authentication rather than the user being redirected to the login screen. We either need to put it back, which fixes the issue by ensuring that any URL outside the already configured ones requires proper authentication, or try to disable anonymous authentication.