basic roles

1. add roles to User and InstanceUser model

2. add two tests and refine existing tests, remove should statement ( http://betterspecs.org/#should )
`administrator`, I don't think there's a need to disambiguate a `super_admin` from an `administrator`. they are used in different contexts.