set default role in users_controller#create
explicitly deny non admins/superusers the ability to change view mode
added view mode reset validator in user model