feat(rxPermission): add ability to match against multiple roles

Allow to pass a list of comma delimited role names to the directive in order to match against any of them.
This evaluates to `true` when `roles` is undefined.  Since we're expecting a string here, I'm replacing `_.isArray()` with `_.isString()`