Pass the user roles to the backend in an x-api-roles header.