Rename `has_role!` to `grant_role!`

Also, add tests, remove `has_role_for?(...)`, since it isn't used.