Specify that URLs require a particular role.
the AuthorizationManager with the provided role
the role to require (i.e. USER, ADMIN, etc).