update user roles fixed