Empty permissions and no roles in jwt tokens. - Kinde