working get roles endpoint with fancy figuring out of things