add roles in the token

Change-Id: If16fea1b6256055d9ad92608009da78292fc7a97