Authorization now is working for the API using Roles