adding roles for permissions. making router redirect for pages requiring login