Rename principals to roles

Rename principals to roles.
Add "hasRole()" call to Authorization.