added roles to token