add role to session based user