Ensure default role for user, if no roles are given