Fix in user.roles: now accepts array of strings, converts to array of symbols