api tests to update/delete roles

- added two tests to delete and update role.
Do not turn `Permission` into a factory in this PR. Certainly, `Permission` should be turned into a factory, but if that is done, then the PR should also include a battery of tests for CRUDing permissions too.