Store roles and permissions in user session instead of reloading them each request