Removed User.role from advanced application template because it was causing confusion that user could be assinged a single RBAC role and that role field is somehow tied to RBAC at all.