instead of allowing an AttributeError to be raised, catch when a user cannot be looked up and raise an InvalidParameterError instead.
Merge pull request #174 from plone/expected-errors

grant_roles and revoke_roles errors