fixes #1; finalized and refined role management UI