Until now, only the token validity was checked, without checking roles. Change-Id: Ic437885b9bfeff4a931225fdaa6c5c076b124195