Ability to lookup roles added on the server side as well as the client module.

You actually would be better off just running a `roles = rolesCache.get(tokenId);` and then checking if it's null.  Since you're not locking, rolesCache could get the key `tokenId` deleted between this call and the call on line 90.