60838 non tenanted auth

Logic to support validating a token without a tenant based on role name.