Seeing as we moved `roles_for` method to the user model, should we move this to the user model as well?