cap-917 - added ability to set roles

and context_id/section from web interface
needed for testing out sso lit dashboard