added ACL.prototype.addUserRoles