Use string role idents #1316

This enables user roles checking with (_.contains(global.user.roles,
role.foo)) as _.contains uses === equality.