Add more tests for roles.

Test the session cache of global access.
Test lack of grant option.