switch to using AuthManager for role management