renaming roles so they play well with spring web security