[webui] also test removing user roles
[webui] don't write files in texts, but only read