Add setter for security.user.role

Fixes gh-700