IFRC: start fixing authorization in deploy (not complete yet), "RDRT Reader" role, bug fixes