bugfix: set_role on non-existent user