A RoleDecoder extracts role information from an identity's attributes.

The RoleDecoder interface defines a DEFAULT role decoder that extracts role information from an identity's "Roles" attribute.

Add a test for the DEFAULT RoleDecoder to RoleDecoderTest.