check for null in repository, redirect page for notInRole user, authorize and roleauthorize attr for controllers
fixed some bugs with role checking