Use User-HABTM-Roles association instead of User.role field