Show user their roles on the profile view. DRY profile controller.
Add/Edit user routes redirect to login route when not authenticated.

When authenticated but not authorized, redirect to ‘denied’ route.