Set role in GET request, rather than header