Update app.js

Return the user_roles on login and on auth.