added getRoles to SecurityModel
fixed merge conflict