migrate default role for users