small bug fix in auth roles hacks