Custom Claims & Role-based Access Control (RBAC) not reflected on JWT - Supabase