added webapp roles and tests