added security_roles to user creation in CSR