add more specs for upload controller
fix weird spacing in routes
Add real roles

- no more single role (which was basically an admin role)
- users can have many roles.