changed security module to check against role ids instead of names. some unit tests are failing, so I'll have to fix those but I have to get out of here this morning.