Fix typo in middleware.hasRoles function