Update roles.rb to for proper documentation.

The last item in the `roles` argument, if it is a Hash, will actually pass as the options when filtering out the roles. This is extremely useful behavior and should be documented.