api tests to update/delete roles

- added two tests to delete and update role.
This is false. We're not fetching a role by its name. How about this?

> DELETE the role, GET it, and assert that an HTTP 404 is returned.