refactor User.role to an EnumSet