alway give user 'user' role at their home site