added decorator, mixin, constants for LTI role-based authorization