Use userRoles if availables instead of tokenRoles

Replace almost everything by using `$this->getUser()`