Adds session information to callbacks for roles-based delegates

Passes the user session through to subclasses that implement the role-based permission callback.
This is needed for the XACML delegate, for instance.

Also cleaned up the BasicRolesDelegate conditions for writer/reader.