correctly drop user/roles