Add form and controller for adding multiple roles to a user. Update view to reflect multiple roles.
Add position column to user_roles so that we can ensure there is always at least one role for a user. Allow deletion of user roles if they are not the primary (only) user role. Add an 'Add Role' button to the user show page