basic roles

1. add roles to User and InstanceUser model

2. add two pending tests and refine existing tests, remove should statement ( http://betterspecs.org/#should )
My concern is that normally admin role id is 0,  and we should not let the user to be admin by default. 

may be I do this in the model ? before_create { self.role = :normal }