Fixed deleteRole to work correctly client side
Merge pull request #11 from nickmoylan/master

deleteRole by _id, not name for untrusted code