auth

I've seen way too many applications using Role Based Authentication where the code check if user is Admin. This is not a good practice at all. Here is a better way....