added admin role and restricted plain  user