adding firewall role for ansible; correcting app role