Added user roles and authorization