added user role management to keystone