simple mock implementation for HttpRequestImpl#isUserInRole