fix roles migration