MOD: userRole controller
FIX: user logical && authFIlter