created different roles for users, added pundit