REFACTOR: user/role auth APIs.