correct json output for users and roles