Get the tests to pass:
* Introduce requestRole helper
* Always honor admin=no
* Welcome guests anywhere admin privileges aren't required