enforce `active` property
create default roles
format the value for account_date
admin scripts to list and remove users