added ability to add / remove roles