make User quack in a way it's a bit more independent from rolify

Rolify was perfect for the initial demo idea, but it risks getting in the way now. I'm defining a few helpers to check a User's role to separate that from implementation.