added ability to assign role to user