deleteRole by _id, not name for untrusted code

As per the documentation, it is now not possible to remove an item from a collection via a selector if it is untrusted code. Changed to delete via _id for successful clientside role deletions.