Allow users to have many roles not just one
Only assign a rule once. Change to use 'to' not 'should' as 'should' is apparently deprecated.
Added ability to remove roles.