DDF-482 hooked up policy manager to sts realm, changed default role lookup to be the actual role identifier