how do I get the user's role form the JWT, can I extend it wihtout callbacks? I know about using the token and session callbacks for it, but thats flimsy, it sometimes fails. any notes?