tested change password
merge
added check for user roles - at least one role needs to be present
added EvaluationItem to model and implemented basic CRUD