refactoring Role class.
now Role and RoleRegistry are under Acl/* namespace like Resource.
updated tests.