Menu authorization using only one database call

- Added tests for new role provider methods.