Fixed user-role relationship
Added DB prepopulation script
Added secured annotations to controllers