Fix UserStore by saving/removing the role from the user

[MikeAlhayek]

Fix #13065

@jtkech this is a patch for the PR we last merged. seems that this was missed.

[jtkech]

Okay

Hmm, just as a reminder

When you introduced the is User directive in place of the (User)user casting, I also noticed that it changed a little the behavior, if not a User before it would fail on the casting, now it silently do nothing, but seems to not be so important.

Hmm, that said in the following, if the userToken is null and user not a User in place of failing on the (User)user casting, it would now fail at the end on a null userToken, if we follow the goal to not throw maybe a missing null check on the userToken.

        if (userToken == null && user is User u)
        {
            userToken = new UserToken
            {
                LoginProvider = loginProvider,
                Name = name
            };

            u.UserTokens.Add(userToken);
        }

        // Encrypt the token
        userToken.Value = _dataProtectionProvider.CreateProtector(TokenProtector).Protect(value);