add acl.isInRole function to test whether a user is in a certain role.  tests added for isInRole & userRoles functions.  version bumped