added Roles.getGroupsForUser with tests