I have having an issues using identity roles. I have previously used this:
identity.addRole("test"); log.info("Identity role #0: #1","test", identity.hasRole("test"));
[...security.Authenticator] Identity role test: false
Identity.addRole() doesn't work like that. I suggest you read the security chapter of the reference docs, there's a section describing how addRole() works, along with a diagram.