Fix SQL generated for Resource.with_role(:role, user)

SQL generated had an incorrect `IN (multi-column SELECT)` when fetching
the roles to match against. Changed the select query to only return the
:id.