adding roles via the gem declarative authorization.