use the email from the userinfo
change the roles | handle common roles with openminted | change role parsing
MERGE newClaimsAPI 42190:48301