more fixes; uses parallel collections for getUserSession while getting roles