New user role created, XSS protection fixed