HOTFIX: user only gets the role visitor upon creation