OP amended BasicAuthenticationInterceptor re roles