fixes #4641 Ensure default user role only after we save/update.

## Solution

Use `after_save` callback to save a user role.