create default roles and their permissions, resolves #270