#58 added rolify to improve testability of authorization