[assets wip] set assets_roles to 'app', minor cleaning