add ability to cancel accounts
add simple role management
prevent owners from having role changed