db:setup task should use the :app role instead of :db