add site_roles to REST API