added user roles with Pundit