Missing test: Add and remove role membership

log in as userX -> userinfo token doesn't contain admin role
log out
log in as admin 
assign role admin to userX
log out
log in as userX -> userinfo token contains admin role
remove user role from userX
log out
log in with userX -> userinfo token doesn't contain admin role
log out