latest roles...moving away from roles package because it is buggy and it
does not do what we need anyway...continuing with the way Pablo/Javier
have it working in add_user...i.e. as an array in User...adding server
verification that the person adding/changing roles is an admin