user now has the default role of 'user'