include roles in current user endpoint