@StuartFerguson commented on [Mon Jul 15 2019](https://github.com/StuartFerguson/SecurityServiceOriginal/issues/49) Currently there is no token protection on the User and Role controllers, this needs to be changed.