move to User#assign_default_role callback