updated user_policy and _spec to allow/check for enum role: [:user, :vip, :admin, :superman]