update navlinks partial to accommodate role-based authorization