the membershipDAO replaced by correct user and role relationship