add roles to users
make sure roles are correct type
serialize roles to array instead of json