added getRoles to SecurityModel