dal changed for auth
ninject inrequestscope bug FIXED
roles added
auth final
with auth