allow multiple roles per user after all