Configure roles instead of app

Small readme typo here.  Looks like these `use` calls should be on the `user` object.