should be ```user_params[:roles_string]``` here