After applying a Role to a User using a Rule at signup (first login), the permissions are not in the user's access token