Making UWNetID Token endpoint use RolesAllowed annotation instead of custom checking
More RolesAllowed changes