implement authorization, change role and user migration: