add default roles and permissions to migration