roles returns token info