Fixed logic in CreateUser when adding roles

I don't think "roles is not null OR roles.Length is larger than zero" was the intended logic.