This adds UserRolesInterface which is used for converting the
oauth2 scopes to symfony roles.

The default interface implementation converts them to "ROLE_SCOPE_FOO".

The interface also gets passed the user ID and can fetch roles from other
places as well, like LDAP, or ignore the scopes etc.

Fixes #4