Dont allow zero length role names into user role set
Tests: Add tests that check GetSession always returns correct role set for a user