removed role from user serializer