sql schema: update users & roles, provide defaults