https://github.com/isaacs/npmjs.org/issues/117

* enabling defaultRoles to be configured instead on an empty array
    * this allows to create new user with default roles defined in the config
    * if not defined in the config we use the current value
* pointing out that you as well can a login as an admin user