We get also the roles, app and user info using the access_token.