bugfix, role now accepts an array of roles