Add Assessor role to newly created users.
Prevent removing all roles from a user.
Remove add_user_without_role_to_session helper.

Now that users always have at least one role, that method is meaningless.