new users get 'contributor' role