Create RoleUtils, AccessDeniedHandlerImpl and USER_ROLES enum.
Update Role model application-security.xml and user-management.jsp