user settings: allow changing role when creating user (#792)
Remove raw SQL from migrations