Added roles to the User json representation
Fixed typo in post /api/user/me
Added role check and fixed password check