refactor users controller to set roles, also fix indentation for private...