api.user.get_roles(): add the option to ignore inherited roles

When granting local roles with api.users.grant_roles() the user's inherited roles (e.g. Member and Authenticated) were also set locally on the object. This change adds an inherit parameter to get_roles() and sets it to False for grant_roles(). Otherwise, get_roles() will work as before, since inherit is True by default.