Implemented check of HttpRequest for membership in pre-configured roles

Implementation changed based on feedback from first PR (#314).  Acceptable roles are now pre-configured in bean and then checked for in the HttpServletRequest.

Also turned down logging for tests since they run on install (was on DEBUG).

https://www.pivotaltracker.com/story/show/69444656