user settings: allow changing role when creating user (#792)