fixed missing roles using Authkey Authentication Filter

The only role of the user was ROLE_AUTHENTICATED. The fix takes roles directly from the active RoleService of the SecurityManager.