add constraint for unique role name