added write_roles/read_roles. allowed normal users to access stuff. groups and users also are protected documents now, except for admin