Update 'auth' role, fix long standing user bug