role support in User class (needs to use configurable field names still, though)
replace boilerplate changelog with something that's almost true