added xsd assertion that roles must be unique within the roles list within <validator> element