fix edit user roles by adding a form encoding type
add error for unauthenticated users who may get to
oas.user.update.test.html.ftl