adding use of ROLE_ prefix, it makes sense after all
adding ROLE_ prefix to support RoleVoter in WebFlow