Add new expiry-based roles.

Add `expired_at` column to `:users` table. Add `trial` role and define
corresponding abilities. Authorize controller actions.