add crud functionality
add authentication
add roles