user: add default role_id

This is a cleaner, DB-side implementation of the intent behind
a97cf33dd952ed677dcec184b276e3438f933878, which was reverted (for this
commit).