add a default role to users