create customer role and rework authorization