compatabiliity: X-Roles Header is comma separated string

For Usage with rbac, the X-Roles Header needs to be comma-separated
string instead of being a list.

Due to this: https://github.com/racker/eom/blob/master/eom/rbac.py#L114