use 4.0 branch; give new users default_role