brief bit of documentation about role-based auth