Fixed test
If id from token doesn't match id from uri, check all the ids in the token's role list