add roles for user
update database