Map roles out of the Userinfo endpoint

[robotdan]

To map roles from the OpenID Connect Userinfo repsonse, we will need to add a configuration for the roles claim.

So we can default to roles and this will mean we extract the value from the roles claim and if it is an array , it is multiple roles, or if it is a single value it is a single role.

This should be an optional configuration.

Checkbox to enable role mapping, default to roles, and we can support an array or a string.

[ ] Enable role mapping
     Mapping claim ___roles__________