adds role-based authorizations to users (many roles per user)
resolves twitter email excluded weirdness