Fixing up role on user create from shibboleth, and the employee creation