renamed pf::user_roles to pf::admin_roles