basic roles

1. add roles to User and InstanceUser model

2. add two tests and refine existing tests, remove should statement ( http://betterspecs.org/#should )
actually, for consistency, `adminstrator`