newly created user role now granted to webapp role
Allow read only user to change their password as all db roles now have db write permissions