Fix the session roles when roles are modified and only put 'active' ones into the session roles array