Allow granting "Reader" role when single roles is configured.

- when `allow_multiple_roles` is false, make `Reader` role selectable by default
- remove roles field description since it is not accurate anymore

/cc @maethu