I just finished banging my head against trying to give a user
multiple roles.  Weird things kept happening.  I finally tracked
it down to the fact that I was entering "User, Staff", and the roles
parsing code was seeing that second role as " Staff" and not finding
it.

Ideally, an undeclared role should raise an error.  But the role
parsing code should also strip the tokens before it compares them.

Logged In: YES 
user_id=469548

Richard, are you planning on doing another 0.5 release? You
already fixed this in 0.6, so is there a need for a backport?

Logged In: YES 
user_id=6405

At this stage, I think we can stick to only critical bugs for backporting to 
0.5 (and we'll only do another 0.5 release if there are any critical bugs).