Modify hasRole() to accept arrays of multiple roles to check