Removing a role or a resource based role should update users token/session information