Roles missing in access token (JWT) - ZITADEL