updating user roles