role system, user authentication, pulling from thedb