added roles to login response
returned roles along with user