Fixed potential backdoor on registration

The user could set his/hers role to administrative via the JSON object
on registration.