One solution is to remove all roles.But the user will still be able to log in. Should we at the same time delete passwor