ALM-675 allow assignment of user role
ALM-675 go back to default user role
ALM-675 don't use :role in strong_parameters