make sure that role exists at the signup time