Add controller tests for roles