only create "user" role if basic-auth-user and basic-auth-pw are being used