too much restriction by requiring Root user for adding transactions

set user role (u/a) when creating

return code 204 if no content (delete) and 201 if created (post new user)