Updated HttpMethodRolesAuthorizationFilter to only support disjunction of roles