Make auth roles optional