Add an interface that allows customizing the user roles

This adds UserRolesInterface which is used for converting the
oauth2 scopes to symfony roles.

The default interface implementation converts them to "ROLE_SCOPE_FOO".

The interface also gets passed the user ID and can fetch roles from other
places as well, like LDAP, or ignore the scopes etc.

Fixes #4