Fix #12: add 'pending roles' to dashboard.