added checkAuth() for role-based filtering