Fixing ContainerRoleProvider logic so that it finds all reachable roles from the super admin
Adding RolesFormType, updating form service configuration
Making extensions property protected in AbstractFormTypeTestCase
Updating UserFormType so that it doesn't depend on the injected RolesFormType (uses type string instead), updating test assertions