users can't define their own roles anymore but you can still edit them if you know the url