Incorrect role for user on content should be caught.

I can currently post `':id': 'member'` to add a member (viewer) to the content even though the constant in Hilary specifies this should be `viewer`