roles controller tests