refactor users controller to set roles, also fix indentation for private...

Use the new Ruby 1.9 hash syntax.