Add a readonly role to new users