update users roles