Users can register with admin and moderator roles using a http-queries. Need to prevent that using validation by role on register action.