Building roles in the SecurityRegistry factory method skips the weight assignment and possibly lets roles that are not expected to be specified.
- add registerRole(name, weight=0)
- update buildRole(name) to require the role to be previously registered and assign the weight
- throw Exception on buildRole if Role not registered