Security fix for mass assignmet of role

This is a quite simple solution for the mass assignment problem.