membership table renamed to user_roles