adds role and api token to user