adds route for roles api action