check that user has a Role attribute

fixes http://manage.dimagi.com/default.asp?99101#562636