public bool IsInRole(string role) { EnsureRolesLoadedIfAuthenticated(); return _roles != null && _roles.Exists(r => r == role); }