split user.roles spec to separate file
stop skipping a couple assertions
fiddly bits that probably did not matter