added has_role method to user