Implements a Role model (ActiveRecord) as a replacement for the "ability group map"

Closes #724