init application roles before users

Trusted users can't be generated if application roles do not exist yet.

(Not sure if the deleted line should have been preserved though)