enable and customise authentication system, and implement role-based authorisation