extended role and user controller with crud methods