/auth/status REST call returns roles of authenticated user if - closes #161 

requested