bugfix: user role