ctl.Userman: fix role disabling and clearing

in case if one user has roles, but then user is changed,
roles must be cleared if nothing received from backend

same for empty user