skip RBAC for login, register and user data
Use the authorization middleware to retrieve the roles and permissions for conversation document
Update the cors options