Sorcery authentication working, but not being enforced. You can create new users without roles at this point