added can abliity to user profile; added before_validation to set role of new users