Use allowed_values_function instead allowed_values

In the current implementation only allowed_values specified in field definition, therefore when a field is created the existing user roles (at that time) are saved (cached) to field's config and this field is going to display these as options every time. In other words, what happens with the field if you add or remove a new role? Nothing, because the field has its own options set already stored in config.