revoking last roles now removes user