added roles info in token response