Don't allow empty role set to be passed to wrap-authorize
Merge branch 'empty-roles' of https://github.com/anarsen/friend
:refer not available in Clojure 1.3 (re: gh-99)
test on Clojure 1.3 - 1.6