Delete roles param if user is not permitted to update roles.
Using rspec-rails 2.13.1 and faye-websocket 0.4.7 (fixes poltergeist errors)