IdentityFactory: added support for loading user roles from DB