Add roles checking.

Until now, only the token validity was checked, without checking roles.

Change-Id: Ic437885b9bfeff4a931225fdaa6c5c076b124195