rbac improvements; pretty list of roles on use profile page