Since users will only have one role, it's easier to use a field than a separate table
Updated documentation and some security stuff