Try to set field name (hidden_name I guess) to "user_roles[]".