MIFOSX-333: ensure authenticaton only returns roles of the authenticated user.