refactored subscribing to users collection in roles manager