remove roles API endpoint from docs