modified getRoles to return a hash of all roles if no id is provided
creating a user now creates roles