Set roles via ajax as save() doesn't send them correctly.

Completely untestable right now, but does actually work.