userobj should not overwrite data.roles for existing user

*_users/org.couchdb.users:user.roles* can only be changed by admin users. npm-registry-client currently sets roles to [] per default even if there are roles set. This leads to an access error during *npm login* for existing users w/ roles.