basic roles

1. add roles to User and InstanceUser model

2. add two pending tests and refine existing tests, remove should statement ( http://betterspecs.org/#should )
also can, I just feel a bit strange