roles & add more info to the user and products

add roles based access to the api and add more info to the user and
products