adding users to roles and removing from roles added