fix security hole that would Mallory to edit a UserRole doc on another domain

she would have to know the original UserRole's doc_id, but that is not a secret
Merge pull request #1063 from dimagi/user-role-security

User role security