Added any-resource scoping to User.has_role?