fix AclUser, if user don't have roles, user_types should be empty and not include all types
Added config option: default_role, If role name set, any user without role, will have this role
cleanup unused use statments;