Role modification only needs to run once

Since roles are stored in the DB, we don't need to add capabilities and roles every page load.  If these need to be modified, we should use an upgrade routine.