Include user role in API response on signup

[seanwash]

I think this is totally fine as the API will check the permissions for each CRUD request and not take role from a user at face value from the client.