adding role to request object