Fix catchErrors.
catchErrors mimics function's arity.
Test for non-matching password error.
Change 'hasActiveRole' to use promises.
Private methods can use callbacks.
Make requestRoles promise based.
Promisify loadAll.
Change 'Base' role to 'Friend'
getLast method for help testing.
Check roles are correctly granted.
Check further users don't get auto approved.
Fix Role.loadAll
Change 'approved' to 'verified' in User.
Validate users aren't verified.