has_role? now accepts an array of roles