Security fix for message output. Bugfix: the WP_User object may have several roles and role[0] is not always given.