changed cmsso auth method to include roles