Sorting out caching of user roles (and a memory leak) when configured as secondary realm; also MeService no longer automatically registered as @DomainService; also cannot remove admin user from admin role (either direction).