security, error views handling, added Role