updates to identity to validate role scopes and other stuff i forgot to check in