Make sure to check the role (even if all authenticated user can access it) so that it's easier to add other roles later