added roles in the api call for users