adding user to roles