update app upstart
add role to unattended upgrades