change can() to hasRole() for user document creation