Fix too-long value for api token roles #327

don't store unused auth roles in token
change auth roles to text column for future use