Do not allow req.body.roles in getRoles (since admin's should POST to /api/users to create a user)
Do not allow req.body.roles in getRoles (since admin's should POST to /api/users to create a user)

thebitmill/midwest-membership-services