minor tweaks to roles and redirects