Protect User.roles from mass assignement