add builtin role _AUTHED when user is authenticated