set user role default to 'user'