re-add old rack roles; need to be renamed via API
Renamed our _.wrap because it clashes with underscores!