Override roles for admin user

[dbauszus-glx]

An admin user may want to check a request with different roles.

The roles parameter could be assigned as the user roles for admin user.

In the auth module before the user is returned.

if (user?.admin === true && req.params.roles) {
  user.roles = req.params.roles.split(',')
}