implement role management with type/provider

Good day.

I've fixed major problems, discussed in #74. 
So, known issues:
* No documentation yet.
* Absense of rspec tests.
* If role was added to some group, it can't be removed. I've cheked code to unix users/groups but failed to implement it.

Everything else should work fine.