getting userRoles to work