fix security hole that would Mallory to edit a UserRole doc on another domain

she would have to know the original UserRole's doc_id, but that is not a secret