Setting the deprecated role profile field applies no roles

A user created with only `role_profile_name` set got no roles because the field was cleared before it moved into `role_profiles`; the move now only happens when the caller changed it.